explorerxxx1
explorerxxx2
Behavioral task
behavioral1
Sample
2b9f20f9a275286b71759c4b4bbff820.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b9f20f9a275286b71759c4b4bbff820.dll
Resource
win10v2004-20231215-en
Target
2b9f20f9a275286b71759c4b4bbff820
Size
18KB
MD5
2b9f20f9a275286b71759c4b4bbff820
SHA1
9884bae833265cc1adbfbc866e4f70c55e2bc727
SHA256
889a2395c8e0011124602e9d2f46ad197c4eebb27aa9d154bff1e12b9116d31e
SHA512
bbef9ed50147aa2fd8e3f7431c172eef916abe9952cad3ae4a2dfb4b1d613b4952b127bfc793fc39de99ccd872b453aaf2b6b57124e1e459ffd946dd61e5ce39
SSDEEP
384:PTfdKRA2h5GDb0PRxa/RCYZcAD4KukK0w+NdVpLk:P7iA2hADb0PRU/RC6XfK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2b9f20f9a275286b71759c4b4bbff820 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
explorerxxx1
explorerxxx2
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ